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REMARKS 

Reconsideration of the application in view of the above amendments and 
following remarks is respectfully requested. Claims 1, 22, and 43 have been amended. 
Claims 2, 23, and 44 have been canceled. New Claims 64-66 have been added. Claims 
1, 3-22, 24-43, and 45-66 are currently pending in the application. 

CLAIMS 1-16, 22-37, AND 43-58 
The Office Action rejected Claims 1-16, 22-37, and 43-58 under 35 U.S.C. 
§102(e) as being anticipated by Elgamal et al. (U.S. Patent No. 6,389,534 Bl). Claims 1, 
22, and 43 have been amended to more distinctly claim the invention. 

With regard to Claim 1, there is recited a method performed by a framework in a 
system comprising the framework and at least one application; that method comprising: 

receiving a request from the application for a customized 
implementation of a service; 

determining a set of zero or more restrictions to be imposed upon 
said customized implementation; 

dynamically constructing said customized implementation, said 
customized implementation incorporating said restrictions, and comprising 
enforcement logic for enforcing said restrictions; and 

providing said customized implementation to the application; 

wherein said customized implementation is invocable by the 
application without further interaction with the framework. 

(emphasis added). 

The method of Claim 1 is quite advantageous because it allows an application to 
obtain access to services without repeatedly requesting those services from some 
centralized framework. 

Specifically, when an application needs to access a particular service, it makes a 
request to a centralized framework for a customized implementation of that service. In 
response, the centralized framework dynamically constructs the customized 
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implementation. The customized implementation includes enforcement logic for 
enforcing certain restrictions on the service. The centralized framework then provides 
the customized implementation to the requesting application. Notice that it is an 
invocable implementation of the service that is returned to the application, not a result of 
an operation. Because this is the case, the application can, in the future, obtain the 
service by invoking the customized implementation directly. The application does not 
need to interact with the framework again to obtain the service. By removing the 
framework from the service request/provision process, the method of claim 1 removes the 
centralized framework as a potential performance bottleneck. This and other benefits can 
be derived from the method of Claim 1 . 



ELGAMAL 

Elgamal does not disclose or suggest such a method. Instead, Elgamal discloses 
one of application programs 101-103 calling one of service modules 104-107, and one of 
service modules 104-107, in turn, calling one of policy filters 108-1 1 1 that has been 
configured by a policy filter initialization module 112. Based on the determination of the 
policy filter, the service module returns to the application either an error (if the operation 
is not allowed) or a result of the operation requested by the application program (see col. 
5, line 41-42, and also col. 6, lines 42-43). 

An important point to note regarding Elgamal is that, unlike the method of Claim 
1, the application of Elgamal does not request a customized implementation of a 
service. Instead, the application requests just the operation (or service) itself Because 
the application requests just an operation or service, the centralized framework of 
Elgamal (e.g., the APIs, protocols, and services, and policy filters shown in FIG. 1 of 
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Elgamal) returns just an error or a result. Unlike the method of claim 1, the framework of 
Elgamal does not provide to the application a customized implementation that can be 
invoked. Because the framework does not return a customized implementation that can 
be invoked, it follows then that every time the application wishes to request the operation 
or service, it must go through the centralized framework. This can create a performance 
bottleneck at the centralized framework, a disadvantage avoided by the method of Claim 
1 , as described above. 

The Office Action cites Elgamal's col. 4, lines 3-9 as allegedly disclosing the 
limitation of "wherein said customized implementation is invocable by the application 
without further interaction with the framework." Applicants respectfully disagree. The 
cited text does not refer to applications 101-103 invoking any functionality provided by 
any customized implementation constructed and provided by the framework. Instead, 
this text summarizes an embodiment further described at col. 9, lines 29-62, with 
reference to Figures 5 and 6. 

This text refers to a cryptographic policy control module 605 verifying a 
cryptographic policy file 606 prior to applications 101-103 invoking any cryptographic 
functionality. The verification of a policy file is not the same as an invocation of a 
customized implementation. At the time that policy file 606 is verified (in steps 502- 
505), cryptographic applications 602-604 have not yet been configured or "customized" 
(in step 507). The text at col. 4, lines 3-9 does not alter the fact that, after the verification 
process, every time the application wishes to request an operation or service, the 
application must go through a centralized framework. Thus, in col. 4, lines 3-9, Elgamal 
discloses something very different than the limitation of "wherein said customized 
implementation is invocable by the application without further interaction with the 
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framework." For at least these reasons, Applicants submit that Elgamal does not 
anticipate Claim 1 . o 

Claim 22 is a device claim analogous to the method of Claim 1 . Claim 43 is a 
computer-readable medium claim analogous to the method of Claim 1 . Applicants 
submit that Claims 22 and 43 are not anticipated by Elgamal for at least the reasons given 
above in connection with Claim 1. 



CLAIMS 17-21, 38-42, AND 59-63 
The Office Action rejected Claims 17-21, 38-42, and 59-63 under 35 U.S.C. 

§ 103(a) as being anticipated by Elgamal in view of Schell et al. (U.S. Patent No. 

5,933,503). The rejection is respectfully traversed. 

Claims 17, 38, and 59 depend from Claims 1, 22, and 43, respectively. Therefore, 

Claims 17, 38, and 59 contain the limitations of Claims 1, 22, and 43, respectfully. 

ELGAMAL AND SCHELL 

As explained above, Elgamal does not disclose or suggest the limitation "wherein 
said customized implementation is invocable by the application without further 
interaction with the framework." Thus, Claims 17, 38, and 59 are patentable over 
Elgamal, taken individually. 

Schell also neither discloses nor suggests the limitation "wherein said customized 
implementation is invocable by the application without further interaction with the 
framework." Indeed, the Office Action relies only upon Elgamal to disclose this 
limitation. The Office Action does not even allege that Schell discloses or suggests this 
limitation. Thus, Claims 17, 38, and 59 are patentable over Schell, taken individually. 
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Even assuming, arguendo, that it would have been obvious to combine Elgamal 
and Schell, the combination of Elgamal and Schell still fails to teach or suggest the 
limitation "wherein said customized implementation is invocable by the application 
without further interaction with the framework" as contained in Claims 17, 38, and 59. 
Accordingly, Applicants submit that Claims 17, 38, and 59 are patentable over Elgamal 
and Schell. 



REMAINING DEPENDENT CLAIMS 
The pending claims not discussed so far are dependent claims that depend on an 
independent claim that is discussed above. Because each of the dependent claims include 
the limitations of claims upon which they depend, the dependent claims are patentable for 
at least those reasons the claims upon which the dependent claims depend are patentable. 
Removal of the rejections with respect to the dependent claims and allowance of the 
dependent claims is respectfully requested. In addition, the dependent claims introduce 
additional limitations that independently render them patentable. Due to the fundamental 
difference already identified, a separate discussion of those limitations is not included at 
this time. 
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For at least the reasons set forth above, Applicants respectfully submit that all 
pending claims are patentable over the art of record, including the art cited but not 
applied. Accordingly, allowance of all claims is hereby respectfully solicited. 
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